Security Advisory

CVE-2015-4616

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-07-08 16:00:00
Last updated 2024-08-06 06:18:12
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress allows remote attackers to create arbitrary files via a .. (dot dot) in the map_id parameter.